Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
File:                     2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft (raw, json)
Hash identifier:          RVjz4lBpCOLi2ZsieB2ACcFkOXRj8/zx4Ns7sof2Jgo=
Subject key identifier:   E2:93:2A:23:1A:86:DF:E9:8A:03:FC:9D:D8:11:D2:A4:3A:1D:CE:97
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       019874BE3BA127FFF422992DDDCEDAC37888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
Manifest number:          1671
Signing time:             Mon 04 Aug 2025 11:01:20 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:20 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:20 +0000
Files and hashes:         1: 0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa (hash: Jd7eKXaBRsHjAr5MfT0g+jpObBfFUUjm1+l++40pejo=)
                          2: 2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl (hash: d4fLVNkdN53/yqNiPnZEo1nrjLP+sRDGyRBDVRJFQr0=)
                          3: 316HUHVaTURv6QAbNKnjijxsrWc.roa (hash: HxDnqH4jBx7TcLDFfZMb8hD49uNoY7/Hc2rLkshPS+w=)
                          4: 3K-ochPFznfa1R58KADoobpI-vU.roa (hash: E6kgHgglfZ2aDwdeJ1gi09PFBDh7xrY6BBweccfhYH4=)
                          5: 5RKzYYqhL3oKCJRewL9NQlha8YY.roa (hash: G5InDowN/2/xf7/t/A+otG1kRZ2u5R+12fwWnuC2D7w=)
                          6: 7_-XQ5S3ycvuSV1bhy-uYlLyOfc.roa (hash: J+exth7L5Mno2CstKeAk8mFxBC1KnZRyQEI9CbsZFlU=)
                          7: 8Si4NFM1aPw38WaLXshjg45ES-o.roa (hash: UrtM0JR+sNV9ZzpQeGuDk9MuIMLeRxzIPtw2VVcogHo=)
                          8: 98W2p6rqVlQsbZ0blHTEkf-sWSY.roa (hash: 6a0M06Lv1SRNn4VgtI5MyppdIV/qAeomn6q+aHDsUgU=)
                          9: 9B35UfCQ13KtDn51RvM_dp9PjDo.roa (hash: oY5j1jE5bBrwX+DjAZmWx8Oie4fGVA/ZCu+WjsgOPDk=)
                          10: 9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa (hash: viMMVl7z3d1MZstaQ+g6rnL64YomgnG0JZZWPIY8by8=)
                          11: 9sVKMgFNatqTmSNiEO4ORQQLRt8.roa (hash: lshn/9YxVbRH0YDgX5hhu796Vkjs6hPEJYrUBAKZCWE=)
                          12: Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa (hash: xLyT3PayX46ktCq1QetEYB5B73wxy34WeOz/POaSXf4=)
                          13: FQqrVaWrjwGbwrQKWFwL-ALxue0.roa (hash: Y21wnJ7WUmqlJg6zD0OtGsbthsIYepPEi/nFJcnb1eU=)
                          14: FpAB9cGzamoAhWywpgXZOn6yYZU.roa (hash: JeApP83qb+O/+snqG+vdGyDdB6Lk9H1Qm5g02fPiOKo=)
                          15: GWp0rSjdfGwKcSPnGUUsbETvzK0.roa (hash: ivBZ83R8nrtLIJ9zF7ql/DDHWzrqf4gsmmhVIUPiq24=)
                          16: IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa (hash: KQukkBzYCAe/vdNdC/O/VpKFkKbDN6k4Tl6VoqE1eLc=)
                          17: IH4sXcqwnvhlYhYNVGkohML13P0.roa (hash: 0Ria3/AvAd2cgyor17KXSZfKr+gZyyKEPG1CmeJ0Q+Y=)
                          18: ImnbYn4T1Zatwc0Mcgra3ZdwtWE.roa (hash: ybXh4v0CDSKBBEJI/ZcZGuGpcfyqFJev7VApGdh0SHo=)
                          19: IsYzqtd5hHafDqEegsYhPCQAd4M.roa (hash: Bkpcl7yMwhE1jJAkRRVc2cwo6WyLqJYTr5qBVoOdZ4E=)
                          20: J70m5SfxW3sdmib1kWAXQGKfdOM.roa (hash: 8Qog18shfCUsPP/BYCaBYaVY5SSTRMf2jp9RR4QSNUU=)
                          21: JDTeB5ypilgeJHkI8PjR-xHlw0s.roa (hash: pnZ6eyfA1+Rq55dO0siEmrlk8zVFvVQdaV2xF71oA9A=)
                          22: NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa (hash: ozIX4QNRWum7wQcyJGvbiqD2NKOdyiaePqT6L3VyYp4=)
                          23: OFaNACp1IWknaNQsvLRLXXXO_lg.roa (hash: ItMuBib+bKE+rwEQI/M4y7+dv6WGn0qrSR+gF36A7QA=)
                          24: Q-310DIQNAGVsZg9LFbEhwIiy8o.roa (hash: a6l4LKf0dI/ZRrmdCqfaYVxbgcVx0SkVuJ3o98UvLPg=)
                          25: Qegn6rKTYeBsjc4SCsbtD3nkXIY.roa (hash: L0tLGFkuWFIKwICmtL17UlqlhulwH0ojyrlH6YIUJls=)
                          26: RU50R6pd3nRtCHtX2WkkAw7Llyg.roa (hash: T5CeoexH64aMyXZVlfI39Z1RQIh+lo/XDGBIg41v35o=)
                          27: RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa (hash: rjDNh/X9V2tOJCumJu3h5LLgZycuOJpT5mRt3QFUYc8=)
                          28: TCNerbOYM531qLiSNUelOuHidRg.roa (hash: 3I5Oxm4sYwoSvKFd38TBXes5Lqmb9dRt3fPryeODDKo=)
                          29: TZ8F3d3rBpKHR-R3hXvibc-affE.roa (hash: P6bovpmV8OJZ3kMwUqsF9enDTGE3fNmKJ0/O8Ggq2YQ=)
                          30: Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa (hash: jsyU4csifLHfmNDkk88po/6joQrMVPaK6WEml7DFV/Y=)
                          31: Vaon60b4zHrksDOoYnDPkaadIxU.roa (hash: Uok4nskSinodPJTJYseZVbLMCiqE058+0pxNVBQOsk8=)
                          32: Wk2nk_npfvuDK3d7yb8uiNsWgso.roa (hash: 9uoY0xdAMA71Q732eb1TH1o48fqtG8bkS/TtEFw86ho=)
                          33: Y-hduokYyBizMZ1aIw3u9MNvOIM.roa (hash: Miwe2NCZBRprn9PF00vl5CBRdxZLcTyIRzuNgn9LKoI=)
                          34: YN7VOdrFA4DxBRGKlzu-DkZKxbw.roa (hash: Tw2n5Zr+e89OCD53j7fn1mis/crLkVVV4D/UZkzzMS8=)
                          35: _rGOoLombdqZx64ZxDfzpaqjTrg.roa (hash: dApbReBYXmLZrFYcB/cQX8tI6KM0yzgxOVCRPmnuLoY=)
                          36: _wC-1ROPyPjW0MawMd3mYCPZedQ.roa (hash: UNeTJPIxBOXFHEiJTwBfIDA25eLHNfDNGAyjojuXXck=)
                          37: d_mDouVtydIsXoD1I1kmanE7QdE.roa (hash: LhnrAE1NqO/WJxjZIP+R8AUtoWMyRXFMztjGxmdOIhE=)
                          38: eW31QtIw0De2hC-wRcz6BbqJBP8.roa (hash: Wc0UbtBVnHavOJyxW2WyHxWo+alMpdJTl5RGV+Bp6cU=)
                          39: hrNAsHvAiF3wM9SA462bg8ZfLa0.roa (hash: XcVoDsvzCljVGMYXw4itgRqDUp6Fp93GIEi5VbC5J1U=)
                          40: kMHgDNH9TXu-UX-kOSEubi3iK_w.roa (hash: UgvMhWz/T+kOQxoEXopZfMQQ/N59klcu3OYPLl05/sc=)
                          41: l9yER5OzV2Zs9rEny9MaVLJSJWE.roa (hash: MTvM1L4a3zSotoCTxk4B550ByU2kERL/BORHSPutlKs=)
                          42: lA75bW7UySj-4Gmj2_AP8C_iuC4.roa (hash: hqdS8xALOEXysaeF5hAmiV4VjJ9G3SYaE0SbHmeuKBQ=)
                          43: lHAwqxpq3Bk851rpL4G6G32KPvo.roa (hash: SsFPabE3LSUH4F0liColQhC10VYQbs8KMbBtFFz0miY=)
                          44: mzknVHY04SbVvkzSjTvkOKHusbU.roa (hash: wPUzeq3u9NQSOHmVS65zBorq/5N5aKuEt5s4b825RM4=)
                          45: nNCkOfG_W5tXBcfy3ePAuNExXn4.roa (hash: Veh+B3lJzCP5HGhQvtAXGs8A6jPedDNBSb38EUASDkY=)
                          46: nb1DMSWD0ydUqO8eKHUNScXGURk.roa (hash: oTJe1GNauOKZxSYDo+8j4eezAo0VUMGAfZcmWGMZY+g=)
                          47: qcpy2trLVlMtCs_YUMoapnpVOiY.roa (hash: kXj1j8R13poDsCnQAYIV+jTRpyGNnFmiFn63Si++gbk=)
                          48: rVq_rgyYfxisfZosLTEYOK8012I.roa (hash: qfUc/8CPVfgW5D79b9lNR+Fs0Ehkxd+q6+C5E566Dkg=)
                          49: rtEOFTOttDdskjTRkIEEQ2lhPbo.roa (hash: /Lf+xqlu0+334vguLGf9g6R3YuTOFfLWSie+GfS9FPE=)
                          50: t0rBAKgYsiYrjVsbAkJNYYT70fU.roa (hash: 6uujdjjncCVXzPlW8+sHpbZpcMrWi+RVeuO4nmVWv+Q=)
                          51: vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa (hash: RzMewHgYJqqbEL1Df9/KePaiVSLqKz56MdonTCkLpKo=)
                          52: vnfpX8VN5wePb4gxJPo9osi4y68.roa (hash: +iO0VZb7J6Ag3acv9aypcQVTaO/2DiP8TP90mQZy6/s=)
                          53: wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa (hash: 5ew+YI6A03XXDHcW34IPcQmeliOZOZVp10AAv6PNozg=)
                          54: wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa (hash: IJOJKrk97D1lz8Q6SGisOh1Nji4BvJsLyuj6phA3kdU=)
                          55: xNPqn5SIMHiXARXbHfFajMtKxBg.roa (hash: dT+L/nzcJBKc6owxGRNwZ+MkdqrDMpSlMlQezZcEb8g=)
                          56: yNbbJn707tS_a8Gi9J0Tcx69Bis.roa (hash: /P8YL51lx4GgfeOWwtR+Oj2TBAmtiisgHyAoHeKBLU8=)
                          57: zZ3LXASmvnU-tG5IFxAXhcytpeY.roa (hash: vauvWlngvw9B9FLlnT3JWLQjDLxvQzC3J5a7IlzCo4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:3b:a1:27:ff:f4:22:99:2d:dd:ce:da:c3:78:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: Aug  4 11:01:20 2025 GMT
            Not After : Aug  5 11:01:20 2025 GMT
        Subject: CN=e2932a231a86dfe98a03fc9dd811d2a43a1dce97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:5d:10:a9:1e:e0:9b:e7:c5:3d:1f:a4:d1:
                    2a:40:d9:85:2e:54:87:eb:d8:06:13:79:17:c8:e9:
                    ad:df:e0:d0:6c:0a:d0:94:36:49:87:d4:e7:07:ee:
                    62:20:e3:3b:b7:35:aa:a1:45:52:b6:f1:35:ce:c3:
                    db:37:c5:ab:e3:63:1d:25:da:f5:fb:21:99:93:fa:
                    68:da:ec:1a:0b:88:70:77:c7:28:06:54:7b:36:f4:
                    38:64:95:1e:5a:57:85:38:7c:df:30:d9:9c:29:01:
                    2f:94:49:63:c0:66:81:d7:dd:aa:36:5d:84:b4:21:
                    07:81:01:26:ea:6e:06:c1:f7:87:af:b8:d6:e8:d3:
                    cb:44:ed:90:9f:df:bc:5b:ab:88:22:4f:36:30:cd:
                    4e:19:91:c5:63:6d:87:4e:2c:49:af:e3:2a:84:e5:
                    92:a5:53:b1:25:c6:e4:b1:35:f9:ab:a2:8a:5c:d3:
                    70:5d:62:fe:9a:1f:e2:d0:f8:cc:69:ee:9c:4c:ea:
                    c9:16:a3:3b:c3:e3:dc:b7:05:67:ec:ea:0d:00:a9:
                    db:36:d3:b2:7b:08:c7:ff:41:d5:78:f5:a6:49:bd:
                    e1:d7:99:1c:ff:5f:17:e9:12:57:26:93:13:95:2b:
                    5f:68:01:69:95:cf:ec:3d:0b:05:30:70:2e:a5:ff:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:93:2A:23:1A:86:DF:E9:8A:03:FC:9D:D8:11:D2:A4:3A:1D:CE:97
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:c9:a4:0a:5c:e8:a3:01:fb:f2:51:03:1b:ca:f4:aa:96:ac:
         55:0d:38:87:58:50:65:e8:01:3b:81:91:60:2d:20:25:66:b0:
         df:a8:91:46:59:73:22:6e:64:9f:07:f0:28:3a:b0:fb:2d:4e:
         a9:52:60:70:a0:00:5e:72:9e:fb:07:84:ec:a6:9e:10:5f:70:
         35:49:5b:f6:cb:0a:ff:00:53:74:67:f2:68:08:fa:ef:5c:1c:
         08:29:03:56:57:e9:0b:7e:97:17:d7:88:75:13:09:8e:f0:6c:
         d5:38:93:ef:41:a7:5e:00:03:17:0b:a3:ac:cd:f1:4c:03:86:
         da:dd:d5:91:37:de:99:1b:d7:69:18:19:9f:ca:d8:2b:ed:56:
         6d:2f:00:cd:b7:f1:a0:2f:6f:78:63:cc:03:0a:71:8e:06:09:
         5b:b4:96:78:41:ea:cc:40:86:70:29:60:5d:e9:d7:4c:fa:4f:
         ca:0d:b1:25:3d:5a:03:24:28:7a:1c:45:11:59:b7:bb:44:60:
         7d:24:7a:3c:89:9f:14:fc:32:83:60:8b:96:1a:63:05:14:43:
         10:18:42:24:63:01:36:64:ec:31:68:1a:7b:e7:fc:e1:4b:88:
         ca:23:ee:eb:eb:9f:d4:6f:7c:57:90:d8:7d:cb:e8:2d:a1:27:
         e4:b9:26:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----